vpn.hzg.de

Issued by HZG CA

About this certificate


This digital certificate with serial number 15:df:91:57:5c:77:c0 was issued on by Helmholtz-Zentrum Geesthacht GmbH .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: KeyUsage extension SHOULD be marked as critical when present

Helmholtz-Zentrum Geesthacht GmbH

Organization: Helmholtz-Zentrum Geesthacht GmbH
State / Province: Schleswig-Holstein
Locality: Geesthacht
Country: DE

Helmholtz-Zentrum Geesthacht GmbH

Organization: Helmholtz-Zentrum Geesthacht GmbH
State / Province: Schleswig-Holstein
Locality: Geesthacht
Country: DE

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 15:df:91:57:5c:77:c0
Serial Number (int): 6156789839853504
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: 7b:bf:6b:c8:26:e7:c5:0e:30:96:50:60:13:96:86:97:e1:c2:2c:99
AuthorityKeyId: 3b:de:f7:a6:48:cd:37:81:87:3a:d0:9d:28:2d:58:ac:50:16:1b:63

Fingerprint (sha1): 17:98:62:9e:8f:af:f0:f4:ed:09:57:5f:6a:6d:19:95:7a:fb:5d:b4
Fingerprint (sha256): a8:50:2a:be:26:4d:48:2f:52:b5:81:44:a6:ca:0f:c7:17:39:61:fb:11:eb:94:7f:65:19:89:e5:9a:45:1f:8f

Issuing Certificate URL: http://cdp1.pca.dfn.de/hzg-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/hzg-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/hzg-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/hzg-ca/pub/crl/cacrl.crl

Check the revocation status for the current certificate on vpn.hzg.de
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Content Commitment
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: vpn.hzg.de

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgIHFd+RV1x3wDANBgkqhkiG9w0BAQUFADCBljELMAkGA1UE BhMCREUxGzAZBgNVBAgTElNjaGxlc3dpZy1Ib2xzdGVpbjETMBEGA1UEBxMKR2Vl c3RoYWNodDEqMCgGA1UEChMhSGVsbWhvbHR6LVplbnRydW0gR2Vlc3RoYWNodCBH bWJIMQ8wDQYDVQQDEwZIWkcgQ0ExGDAWBgkqhkiG9w0BCQEWCWNhQGh6Zy5kZTAe Fw0xMzA2MTgwODAxMTJaFw0xODA2MTcwODAxMTJaMIGAMQswCQYDVQQGEwJERTEb MBkGA1UECBMSU2NobGVzd2lnLUhvbHN0ZWluMRMwEQYDVQQHEwpHZWVzdGhhY2h0 MSowKAYDVQQKEyFIZWxtaG9sdHotWmVudHJ1bSBHZWVzdGhhY2h0IEdtYkgxEzAR BgNVBAMTCnZwbi5oemcuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClqSu7kj+7LwIPnnUr/duAi4R16LlzCTlL9jqi4H/sD5XtiL7bL0dG/48ig6UI byYe2BFpczu+e+bpckX2Diix+ve+3ZdNw//pOUWwV3R5Hu5fx2LWivehexc+2Gv4 GFtDj6+cyCGdNvJ3bPrpInd26qEywCEHZrpBvFkY7J1VCeIA4PvOFdN4DhrArodv aiSuvxsNnn4HLs4kwevyTDwY0GPDNM87gWbFOmEHEq34sb9OEiJwtHZmvXAdgHAh PV7k+gRcR0SNqVKWxHPMD3dtMsfFA9A3FaeRdRiU7mjtde2tl8atetg8h5Ikx0Wj IXGZ1zeju3YbzAGQmatvjJFBAgMBAAGjggIGMIICAjA5BgNVHSAEMjAwMBEGDysG AQQBga0hgiwBAQQDADARBg8rBgEEAYGtIYIsAgEEAwAwCAYGZ4EMAQICMBMGA1Ud JQQMMAoGCCsGAQUFBwMBMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgXgMB0GA1UdDgQW BBR7v2vIJufFDjCWUGATloaX4cIsmTAfBgNVHSMEGDAWgBQ73vemSM03gYc60J0o LVisUBYbYzAVBgNVHREEDjAMggp2cG4uaHpnLmRlMHcGA1UdHwRwMG4wNaAzoDGG L2h0dHA6Ly9jZHAxLnBjYS5kZm4uZGUvaHpnLWNhL3B1Yi9jcmwvY2FjcmwuY3Js MDWgM6Axhi9odHRwOi8vY2RwMi5wY2EuZGZuLmRlL2h6Zy1jYS9wdWIvY3JsL2Nh Y3JsLmNybDCBxwYIKwYBBQUHAQEEgbowgbcwMwYIKwYBBQUHMAGGJ2h0dHA6Ly9v Y3NwLnBjYS5kZm4uZGUvT0NTUC1TZXJ2ZXIvT0NTUDA/BggrBgEFBQcwAoYzaHR0 cDovL2NkcDEucGNhLmRmbi5kZS9oemctY2EvcHViL2NhY2VydC9jYWNlcnQuY3J0 MD8GCCsGAQUFBzAChjNodHRwOi8vY2RwMi5wY2EuZGZuLmRlL2h6Zy1jYS9wdWIv Y2FjZXJ0L2NhY2VydC5jcnQwDQYJKoZIhvcNAQEFBQADggEBAGnUx0wUnKcsvQ44 3jHAA/Hr+WHasTQRjRIVm3XKt9kLOXlOtAvsd3XAL1hwchxblc5uuaotFRGKF4u5 yQmfDUmpN1UK83Q9cs9g0VIQFPRG332j/hmOAaAbgpvn1/GC/B8wOnm6SFDFjJLT Ze3rhw9JufAQvscp/GwsrH3ziuIeUwKRYxsHjjQe5GnwGtcsvvEI3TI8otAko0TC o4VDX6sm2XRf6KS+NMp2DzW11gpWw3UgFVDBLnhTjjnNL2DncPBg4tX9WB0Kik5B G0jnbpXSev70TGzcLPFaCx6CEK/paTnOXswtx8m5b36XZD5Cywm0iWTc+EwgeQgG GgKSmnw= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApakru5I/uy8CD551K/3b gIuEdei5cwk5S/Y6ouB/7A+V7Yi+2y9HRv+PIoOlCG8mHtgRaXM7vnvm6XJF9g4o sfr3vt2XTcP/6TlFsFd0eR7uX8di1or3oXsXPthr+BhbQ4+vnMghnTbyd2z66SJ3 duqhMsAhB2a6QbxZGOydVQniAOD7zhXTeA4awK6Hb2okrr8bDZ5+By7OJMHr8kw8 GNBjwzTPO4FmxTphBxKt+LG/ThIicLR2Zr1wHYBwIT1e5PoEXEdEjalSlsRzzA93 bTLHxQPQNxWnkXUYlO5o7XXtrZfGrXrYPIeSJMdFoyFxmdc3o7t2G8wBkJmrb4yR QQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6156789839853504 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schleswig-Holstein' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Geesthacht' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helmholtz-Zentrum Geesthacht GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HZG CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-06-18 08:01:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-17 08:01:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schleswig-Holstein' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Geesthacht' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helmholtz-Zentrum Geesthacht GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.hzg.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20912741565249481101419300669084692795671230023596087519554523041714110210610797039347282663464417178198990389698388124520278837182796651861574919061776409200608750701910138761250698714636234388601223574097062292460229346801125884092400176949226781452251153501442374939113714374391837132982412463365660842679439118689726914545374753383317614869762043423702625988928767160955400704439315842190454946815146049557264382175904870826138129460597049786230288366683499249023643992625720799231673870958778683151642973051614344972753241094308467960513090031857888058366713755603351301260477453313131659803633943488723644354881 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.0 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.0 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05e0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7bbf6bc826e7c50e3096506013968697e1c22c99 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3bdef7a648cd3781873ad09d282d58ac50161b63 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.hzg.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/hzg-ca/pub/crl/cacrl.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/hzg-ca/pub/crl/cacrl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (186 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/hzg-ca/pub/cacert/cacert.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/hzg-ca/pub/cacert/cacert.crt' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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